Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: aFVdgl7SQX9rAuOx8Hpx86gW24SZ+cX2L9UTQ76PCqw=
Subject key identifier: 6E:DA:D2:6F:D7:2C:EE:23:5F:97:5E:8A:36:F9:87:53:85:90:8E:52
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 01984777D9498675CBCD6D6488F98E4B338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 0321
Signing time: Sat 26 Jul 2025 16:01:33 +0000
Manifest this update: Sat 26 Jul 2025 16:01:33 +0000
Manifest next update: Sun 27 Jul 2025 16:01:33 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: 7PILjLm4WFuD+9+sZ7/oyZQbdV0dwYv2HDGZXOBBy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:d9:49:86:75:cb:cd:6d:64:88:f9:8e:4b:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Jul 26 16:01:33 2025 GMT
Not After : Jul 27 16:01:33 2025 GMT
Subject: CN=6edad26fd72cee235f975e8a36f9875385908e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:5b:e7:d5:45:fe:1f:52:42:1d:40:5a:3a:
f7:8c:21:dc:1d:a0:fe:b8:4e:e1:b0:11:95:c2:21:
fa:01:18:85:a2:14:52:fe:83:d8:db:4d:c3:07:80:
86:e0:d4:64:46:87:24:94:0c:49:b8:ae:0c:75:70:
b3:53:89:02:12:1e:08:8c:39:b7:2c:b4:da:6d:9c:
c4:81:0c:f5:53:ac:16:3b:b7:e9:b8:dc:09:24:36:
5d:a3:fa:f8:9e:fe:3f:57:36:d1:5b:ed:d3:37:5f:
bb:8e:41:17:d3:89:83:7e:cb:30:d3:33:1e:e2:eb:
ca:e8:b5:df:77:ad:c3:bd:34:fc:3b:a6:98:ae:00:
78:27:61:be:a2:e2:77:f7:72:a0:d6:c0:44:5e:3e:
79:2e:0f:4d:24:0f:ee:90:07:95:9a:5d:41:b5:ce:
67:e1:72:4c:ee:2b:32:be:c2:60:e6:55:fa:4e:29:
6b:e5:f6:31:59:53:3e:c8:b3:15:07:43:14:22:8c:
48:82:4e:86:63:d7:73:e2:01:ba:78:d4:79:12:83:
1d:e8:b7:ae:a6:ea:4f:85:03:07:2b:30:a2:ab:ac:
f7:49:e2:79:a4:66:a7:59:0a:49:2e:94:51:93:22:
f1:dd:4c:da:7a:77:3d:af:7a:51:21:3e:66:d7:77:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:D2:6F:D7:2C:EE:23:5F:97:5E:8A:36:F9:87:53:85:90:8E:52
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:42:c7:67:02:ed:85:ac:5c:57:57:1c:0c:4d:ea:bb:a1:55:
07:0e:93:51:6e:a8:69:2a:af:29:71:2d:8a:f4:11:fe:73:db:
2d:0c:09:71:82:34:9f:2f:e7:84:8d:b9:63:2f:12:f4:3e:33:
19:61:f7:50:e5:6a:84:cd:55:19:3c:ef:4d:83:6a:3a:28:48:
c2:d4:fa:f2:62:28:d9:b9:9d:7f:38:78:8c:da:71:31:c6:65:
f0:c6:4a:a2:a6:bc:67:15:93:49:f7:b0:0f:89:71:d0:e0:5d:
5d:9e:ab:c2:97:15:8c:93:54:2b:13:8c:aa:b7:89:86:30:60:
82:f5:bc:67:51:6c:69:28:14:ce:85:6e:ed:43:5a:26:ad:4b:
d3:8e:56:9c:9a:ea:0c:9d:68:5f:6e:75:5a:f3:dd:89:31:b0:
9d:9e:40:31:bc:eb:61:7f:32:ae:6f:e8:dd:9e:36:9f:4f:10:
6e:30:5b:e0:9a:00:a1:0f:53:6d:d2:36:83:09:83:d9:a5:55:
e6:87:76:f4:65:77:d4:ad:5f:b9:20:ad:19:91:59:08:63:dc:
30:24:5a:2d:ef:1f:8d:de:5f:10:db:83:9b:7a:f8:97:f9:1a:
1d:bd:d0:84:42:79:b7:3f:47:22:c9:98:aa:67:ee:8b:56:7a:
18:28:7c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd9lJhnXLzW1kiPmOSzONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkY2RmNDhmNWVhNzZjNTBhNzE3ZTEwNTgwNDhjYmFmNjdm
YjI0OTIwHhcNMjUwNzI2MTYwMTMzWhcNMjUwNzI3MTYwMTMzWjAzMTEwLwYDVQQD
Eyg2ZWRhZDI2ZmQ3MmNlZTIzNWY5NzVlOGEzNmY5ODc1Mzg1OTA4ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRdb59VF/h9SQh1AWjr3jCHcHaD+
uE7hsBGVwiH6ARiFohRS/oPY203DB4CG4NRkRocklAxJuK4MdXCzU4kCEh4IjDm3
LLTabZzEgQz1U6wWO7fpuNwJJDZdo/r4nv4/VzbRW+3TN1+7jkEX04mDfssw0zMe
4uvK6LXfd63DvTT8O6aYrgB4J2G+ouJ393Kg1sBEXj55Lg9NJA/ukAeVml1Btc5n
4XJM7isyvsJg5lX6Tilr5fYxWVM+yLMVB0MUIoxIgk6GY9dz4gG6eNR5EoMd6Leu
pupPhQMHKzCiq6z3SeJ5pGanWQpJLpRRkyLx3Uzaenc9r3pRIT5m13cniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7a0m/XLO4jX5deijb5h1OFkI5SMB8GA1UdIwQY
MBaAFM3N9I9ep2xQpxfhBYBIy69n+ySSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWIt
MjVhMWFiNWQxODkzLzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWItMjVhMWFiNWQxODkz
LzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhULHZwLt
haxcV1ccDE3qu6FVBw6TUW6oaSqvKXEtivQR/nPbLQwJcYI0ny/nhI25Yy8S9D4z
GWH3UOVqhM1VGTzvTYNqOihIwtT68mIo2bmdfzh4jNpxMcZl8MZKoqa8ZxWTSfew
D4lx0OBdXZ6rwpcVjJNUKxOMqreJhjBggvW8Z1FsaSgUzoVu7UNaJq1L045WnJrq
DJ1oX251WvPdiTGwnZ5AMbzrYX8yrm/o3Z42n08QbjBb4JoAoQ9TbdI2gwmD2aVV
5od29GV31K1fuSCtGZFZCGPcMCRaLe8fjd5fENuDm3r4l/kaHb3QhEJ5tz9HIsmY
qmfui1Z6GCh8oQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:07:07 2025 by rpki-client